difra/plugin-users

Release historydanger

The latest release was published in February 2022, and there have been no releases in roughly four years and seven months. Five total releases show some history, but the prolonged pause raises abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no observed recent maintenance.

Package scaffoldingcaution

A changelog is present in both the package and repository, but the package has no README and no tests. The changelog improves release transparency, while the missing README is a smaller consumer-documentation gap.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The absence of scanning is a hygiene gap, though it is less decisive than the observed maintenance inactivity.

Security policycaution

The repository has no security policy. For a user-management plugin handling authentication and account recovery, this weakens the project's vulnerability-reporting and response transparency.